Help with TIB Browser, Zango, XXXToolbar etc.

Hi there

Can u guys/girls please help out.

The symptoms are as follow:

1. When i connect to my ISP i automatically get a "windows messenger"
popup, that just don't wanna go away.

2. When i open explorer i get redirected to
http://213.159.117.134/index.php (a search site).

3. After every 15 minutes a "sex" dialer pops up and i get disconnected.

Other info:

1. Spyware tells me I’ve got: TIB Browser, Zango, XXXToolbar viruses.
I’ve deleted them but off course that doesn't help.

2. I’ve tried System Restore but problems keep coming up.

3. In “Ad and Remove programs” there is a “Yahoo Address Auto
complete” which i cannot remove or delete.

Thanks

PS: Hijackthis log is available on request

 

Hi Ironxxx69,

It is always a good idea to start with the Cleanup Tutorial HERE:
READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan and Virus Removal

This will remove a lot of crap that would otherwise clog up a HijackThis log.

Please note the steps that you are able to complete and the ones that give you problems. Note that you need to be in Safe Mode with System Restore OFF and have the Viewing of Hidden Files ENABLED as per the instructions in the link. Make sure to do the Online Scans.

Post back and let us know how you fared. Also, send us a HijackThis Log.

Note that your HijackThis should be up-to-date (v1.98.2) and MUST be extracted to its own safe folder - C:\Program Files\HijackThis!

If you need a Fresh Download of HJT, get it HERE: HijackThis 1.98.2

Also note that, before you scan, you MUST close all running programs including your web browser, e-mail and items in the system tray.

Please save your HJT Log as a .txt file and attach it via the "Manage Attachments" tool in the Additional Options section when you post.

Complete the above and one of the experts here should be able to help you remove any residual malware.

Best luck
PP